[Hiring] Information Systems Security Officer @IBR

Role Description

The Information Systems Security Officer (ISSO) must be able to meet the key criteria below:

• Location: 100% remote. This is a United States based position, and candidates must reside in the continental United States to be eligible for employment.
• Years’ Experience: 5+ years professional experience in a cybersecurity related field.
• Education: Bachelor’s Degree in IT related field.
• Security Clearance: IBR is a federal contractor. Applicants must be able to obtain and maintain a Public Trust security clearance issued by the United States Citizenship and Immigration Services (USCIS).
• Employment Type: Full Time.
• Work Schedules: IBR promotes work-life balance by offering flexible scheduling options. Standard business hours are aligned to the Eastern Time Zone.

As an ISSO at IBR, you will play a key role in supporting a government program by applying NIST SP-800-53 controls, monitoring security posture, analyzing vulnerabilities, and coordinating remediation across AWS, applications, APIs, and infrastructure.

Responsibilities:

• Communicate regularly with DHS customers and internal engineering teams to lead required RMF process/steps to assess and authorize a system obtaining and maintaining a full ATO (Authority to operate).
• Support writing and reviewing of RMF documentation packages to support risk assessments.
• Design and execute the security testing plan of all requirements and analysis required to complete a RMF package document for submittal and approval.
• Use vulnerability scanning tools and frameworks to evaluate the security posture of a system.
• Perform monthly continuous monitoring reporting to include analysis of scans, logs, accounts, etc.
• Coordinate directly with program stakeholders to gather, document, and translate business requirements, facilitate stakeholder and team meetings, provide security reports, and track security work through completion.
• Assist the customer in preparing training and tabletop exercises for contingency planning, incident response and disaster recovery.
• Complete ISSO USCIS provided training as required.

Qualifications

• Must have 5+ years professional years of experience in Cybersecurity.
• Must be able to obtain and maintain a Public Trust security clearance.
• Must have a Bachelor’s Degree in an IT related field.
• Cybersecurity related certification required.
• AWS related certification preferred.
• Must have a strong understanding and professional experience with NIST SP 800-53 controls and their application within the Risk Management Framework (RMF).
• Must have a strong understanding and professional experience with API-based security mechanisms and the OWASP framework for web application vulnerabilities.
• Must have professional working experience with CSAM, STIGs, and SRGs.
• Experience with cloud security posture management (CSPM) tools, such as AWS Security Hub, AWS Config, AWS Trusted Advisor, or Amazon GuardDuty.
• Must have AWS experience.
• Experience leading RMF for IATT/ATO activities involving custom on-prem and cloud solutions.
• Experience assessing the risk of deficiencies identified during RMF control testing and tracking corrective actions.
• Experience using cybersecurity tools or scanners to evaluate system security posture, including scanning or reporting for web applications, databases, containers, or other system components.
• Experience with digital certificates and public key infrastructure (PKI).
• Experience with vulnerability management tools such as Tenable or Nessus.
• Experience with status code analyst tools such as SonarQube.
• Experience with static application security testing tools such as Checkmarx.
• Familiarity with Nexus IQ or other software dependency scanning tools.
• Familiarity with Prisma Cloud Compute (formerly Twistlock) or other container scanning tools.
• Experience with AWS architecture and a technical understanding of cloud technologies used in customer environments, including microservices, containers, zero trust concepts, data streaming, or data pipelines.
• Experience conducting continuous monitoring, preparing monthly status reports, and analyzing and reporting cybersecurity vulnerability scan results.
• Experience with requirements analysis, security architecture and design, and documentation of cybersecurity or information security solutions.
• Experience gathering and creating security requirements, coordinating with stakeholders, facilitating meetings, and tracking security work through completion.
• Understanding of CI/CD pipeline and enterprise DevSecOps implementation.
• Working knowledge of Agile and DevSecOps practices and cybersecurity, network, systems, and software engineering principles.
• Familiarity with Atlassian tools, such as Jira, Confluence, and Splunk.
• Familiarity and understanding of Artificial Intelligence / Machine Learning preferred.
• Familiarity and understanding of ETL data pipelines.

Benefits

• Nationwide medical, dental, and vision insurance.
• 3 weeks of Paid Time Off and 11 Paid Federal Holidays.
• 401k matching.
• Life Insurance, Short-Term Disability, and Long-Term Disability at no cost to our employees.
• Supplemental insurance options.
• Flexible spending accounts and Dependent Care spending accounts.
• Wellness incentives.
• Reimbursement for professional development and certifications.
• Access to training assistance opportunities to support career growth and progression.
• Hybrid and Remote work opportunities to support work-life balance.

Application Deadline

Applications will be reviewed as received and accepted on a continuous basis until the position is filled. Early application is strongly encouraged.

Physical Demands and Work Environment

This role primarily involves sedentary work, in a workplace and/or home office environment. There are some physical demands associated with the role, including:

• Extended periods of sitting and working at a computer workstation.
• Occasional lifting and carrying of equipment or materials weighing up to 20 pounds.
• Occasional travel to client sites or meetings may be required.
• Work may need to be performed in a fast-paced environment requiring quick decision making.
• Flexible work arrangements may be available based on business needs.
• Will be exposed to a wide variety of clients in differing functions, personalities, and abilities.